934e5538341e13807b5a173776e947596814f9dd2fd179e8373d70f2b6170b24

General

Target
934e5538341e13807b5a173776e947596814f9dd2fd179e8373d70f2b6170b24
Size 239KB
Sample220701-dlqcesbce9
SHA256 934e5538341e13807b5a173776e947596814f9dd2fd179e8373d70f2b6170b24
MD5 d9c64a5e7e3dd6aece2ae1dadba56b8f
SHA1 e898639ea0f46754acd5d9102145e09602341ba7
SHA512 317bbcbca132cfe33c84628af0765139c3b0c93c6f2f9b7e3047c378b64727eb40087e3a869e9014591cb126d7cf7a7e53e1ae183deab26755dfffdfbc87c097
SSDEEP 3072:L1H4FdrzyEnk9bc+8aN+nfz3yIg6+U8Wozy1WZ:5oXk9b2zfz3hdL8n21W
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

934e5538341e13807b5a173776e947596814f9dd2fd179e8373d70f2b6170b24

.exe 239KB

934e5538341e13807b5a173776e947596814f9dd2fd179e8373d70f2b6170b24

IMPHASH 97e4c88d93e8bf69b25e1395eece21f4
SHA256 934e5538341e13807b5a173776e947596814f9dd2fd179e8373d70f2b6170b24
MD5 d9c64a5e7e3dd6aece2ae1dadba56b8f
SHA1 e898639ea0f46754acd5d9102145e09602341ba7
SHA512 317bbcbca132cfe33c84628af0765139c3b0c93c6f2f9b7e3047c378b64727eb40087e3a869e9014591cb126d7cf7a7e53e1ae183deab26755dfffdfbc87c097
SSDEEP 3072:L1H4FdrzyEnk9bc+8aN+nfz3yIg6+U8Wozy1WZ:5oXk9b2zfz3hdL8n21W
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

102496

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualQueryEx FindActCtxSectionStringA ActivateActCtx SetCommConfig CreateEventA TerminateProcess lstrcatA GetStringTypeExA GetProcAddress ExpandEnvironmentStringsA GetProcessWorkingSetSize LocalAlloc _lread GetModuleHandleA UpdateResourceW DeleteFileA GetProcessHeap GetTickCount SetEvent GetTimeFormatA SetDefaultCommConfigW GetNumberOfConsoleMouseButtons LoadResource SetEndOfFile GetNumaHighestNodeNumber InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW GetLocaleInfoW TlsGetValue TlsSetValue GetModuleHandleW SetLastError GetCurrentThreadId HeapSize ExitProcess InitializeCriticalSectionAndSpinCount GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc LoadLibraryW

advapi32

RegDeleteValueW SetSecurityDescriptorDacl OpenServiceW DestroyPrivateObjectSecurity

Name

.text

Size

105KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

50.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.yasuha

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

934e5538341e13807b5a173776e947596814f9dd2fd179e8373d70f2b6170b24

kernel32

advapi32